Elastic Windows Event Explorer


Publisher - LsaSrv

Event ID 45057

Message:

A failed logon attempt has caused a logon cache entry for user %{Username} to be deleted. The authentication package was %{Package}, and the error message was %{Error}.

Event Data:

# Name In Type
Out Type
1 Username win:UnicodeString xs:string
2 Package win:UnicodeString xs:string
3 Error win:UnicodeString xs:string

Observed Windows Versions:

Version: 0

Fingerprint: 22TO3ZL5YON24